---
type: resource-type
title: resources
description: azure resource type Microsoft.ProfessionalService/resources
name: resources
lexicon: azure
resource_type: Microsoft.ProfessionalService/resources
---
`Microsoft.ProfessionalService/resources`, a resource type of the azure lexicon.

## Properties

- `name` (`string`, required): The name of the resource.
- `properties` (`resources_ProfessionalServiceCreationProperties`, required): Properties of the ProfessionalService resource that are relevant for creation.
- `location` (`string`, optional): Resource location. Only value allowed for ProfessionalService is 'global'
- `tags` (`Record<string, unknown>`, optional): the resource tags.

## Attributes

- `id`

## Governed by

- [AZR010](/rules/AZR010.md): Redundant dependsOn — target is already referenced via reference() or resourceId() in properties
- [AZR011](/rules/AZR011.md): Missing or invalid apiVersion — every ARM resource must have a valid apiVersion in YYYY-MM-DD format
- [AZR012](/rules/AZR012.md): Deprecated API version — apiVersion older than 2023 may lack features and security patches
- [AZR013](/rules/AZR013.md): Resource missing location — most Azure resources require a location property
- [AZR014](/rules/AZR014.md): Public blob access enabled on storage account — disable allowBlobPublicAccess to prevent public data exposure
- [AZR015](/rules/AZR015.md): Missing encryption on storage account — enable encryption services to protect data at rest
- [AZR016](/rules/AZR016.md): Key Vault soft-delete not enabled — enable to protect against accidental deletion
- [AZR017](/rules/AZR017.md): Key Vault purge protection not enabled — enable to prevent permanent deletion during retention period
- [AZR018](/rules/AZR018.md): SQL Server missing auditing — enable auditing for compliance and threat detection
- [AZR019](/rules/AZR019.md): SQL Server database missing TDE — enable Transparent Data Encryption to protect data at rest
- [AZR020](/rules/AZR020.md): App Service missing managed identity — enable SystemAssigned or UserAssigned identity
- [AZR021](/rules/AZR021.md): App Service missing HTTPS-only — set httpsOnly to true to enforce encrypted traffic
- [AZR022](/rules/AZR022.md): App Service missing minimum TLS 1.2 — set minTlsVersion in siteConfig to enforce TLS 1.2+
- [AZR023](/rules/AZR023.md): VM missing managed disk — use managed disks for better reliability and management
- [AZR024](/rules/AZR024.md): VM missing boot diagnostics — enable for troubleshooting startup failures
- [AZR025](/rules/AZR025.md): AKS cluster missing RBAC — enable Kubernetes RBAC for access control
- [AZR026](/rules/AZR026.md): AKS cluster missing network policy — configure networkPolicy for pod-to-pod traffic control
- [AZR027](/rules/AZR027.md): Container Registry admin user enabled — disable admin and use Azure AD or service principals
- [AZR028](/rules/AZR028.md): Network interface missing NSG — associate an NSG to control network traffic
- [AZR029](/rules/AZR029.md): Managed disk missing encryption — enable encryption to protect data at rest
- [AZR030](/rules/AZR030.md): Resource deployed at an unsupported template scope — split scopes into separate templates
- [AZR031](/rules/AZR031.md): Policy assignment has enforcementMode DoNotEnforce — the guardrail is disabled
- [AZR032](/rules/AZR032.md): Custom policy definition assigned nowhere — a defined but unassigned guardrail enforces nothing
- [AZR033](/rules/AZR033.md): Tenant subscription policy does not block subscriptions from leaving